Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/5a7d2f-5168-4720-8ce0-704149619c46/1/RYzFKgcHzDQKycf26QKLZLcCZ7w.mft
File: RYzFKgcHzDQKycf26QKLZLcCZ7w.mft (raw, json)
Hash identifier: wA6D6ifKmOY4fHWZCTwDn7t66Qecv/RlKcDDKbUWmDY=
Subject key identifier: 74:2E:7E:02:8D:46:36:44:69:40:B5:86:74:9A:A8:69:30:A6:78:29
Authority key identifier: 45:8C:C5:2A:07:07:CC:34:0A:C9:C7:F6:E9:02:8B:64:B7:02:67:BC
Certificate issuer: /CN=458cc52a0707cc340ac9c7f6e9028b64b70267bc
Certificate serial: 0199FCFD840CAF116BEFEA3B008681D5E8FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RYzFKgcHzDQKycf26QKLZLcCZ7w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/5a7d2f-5168-4720-8ce0-704149619c46/1/RYzFKgcHzDQKycf26QKLZLcCZ7w.mft
Manifest number: 083A
Signing time: Sun 19 Oct 2025 15:01:36 +0000
Manifest this update: Sun 19 Oct 2025 15:01:36 +0000
Manifest next update: Mon 20 Oct 2025 15:01:36 +0000
Files and hashes: 1: IkNC-TUcCoYBxsQeLh6_eg3WO0Y.roa (hash: FzBKtoxKdAzZGhoYpGryWwHPZ5WZpqNHKyLplIOiPAU=)
2: RYzFKgcHzDQKycf26QKLZLcCZ7w.crl (hash: 8ozFGi4wcd5R4GV90TEKd5kE/bDUmloSAjdia01j9u0=)
3: _5WIvJfKyXPt7q3eDEUV4dqzXLc.roa (hash: WY6kQSCLPQqO6U8inB26YKVMLyQQktJDfS2xbDWHzWw=)
4: uDI0D6qr7-usCDL-fgv2aBY_bUU.roa (hash: H5Mm89vS+5YR+a0XeYRvNkRodKD27aIsyfCqNBxXQhg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/5a7d2f-5168-4720-8ce0-704149619c46/1/RYzFKgcHzDQKycf26QKLZLcCZ7w.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/5a7d2f-5168-4720-8ce0-704149619c46/1/RYzFKgcHzDQKycf26QKLZLcCZ7w.mft
rsync://rpki.ripe.net/repository/DEFAULT/RYzFKgcHzDQKycf26QKLZLcCZ7w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:fd:84:0c:af:11:6b:ef:ea:3b:00:86:81:d5:e8:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=458cc52a0707cc340ac9c7f6e9028b64b70267bc
Validity
Not Before: Oct 19 15:01:36 2025 GMT
Not After : Oct 20 15:01:36 2025 GMT
Subject: CN=742e7e028d4636446940b586749aa86930a67829
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:3b:0e:4a:ec:ea:4c:89:c1:1b:3f:c9:28:b9:
a8:49:fb:d2:fa:e5:14:1e:15:61:01:d0:64:52:6e:
e9:28:68:39:bf:13:bd:a2:39:d5:12:2a:f7:ab:30:
56:bc:48:40:7b:80:82:26:ac:80:83:11:e3:97:3f:
a8:ac:be:c8:fb:c7:d9:de:bf:e7:e0:bb:b9:71:f2:
10:6b:4e:5f:d9:d2:00:54:40:a6:52:82:54:bc:c2:
01:e5:ff:29:2c:70:9f:ed:08:1b:f2:af:79:94:50:
91:7f:dc:b1:dc:16:46:ea:c5:09:74:e8:61:ad:8e:
d0:b2:aa:55:4d:bd:17:ea:b0:3b:c9:1b:50:f3:79:
1f:ed:53:77:54:c7:6a:5c:ab:18:a0:ed:f1:49:8a:
15:57:76:92:c6:36:95:72:53:05:aa:2d:5f:32:40:
05:8c:17:f7:3d:9f:07:a0:f4:34:68:05:4c:c2:b6:
c6:f6:a6:53:8b:f2:28:34:07:b8:bf:a1:18:67:41:
11:8e:b7:18:3a:41:00:d5:80:34:c3:57:ce:bf:00:
c1:1f:b9:f3:e9:04:d4:7a:40:f6:49:5f:e2:fc:10:
f1:6c:21:ac:42:b2:bb:93:f0:51:15:83:5b:1e:b3:
5d:95:27:ba:64:9b:97:64:5e:3d:e0:b2:7d:8c:bd:
a0:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:2E:7E:02:8D:46:36:44:69:40:B5:86:74:9A:A8:69:30:A6:78:29
X509v3 Authority Key Identifier:
keyid:45:8C:C5:2A:07:07:CC:34:0A:C9:C7:F6:E9:02:8B:64:B7:02:67:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RYzFKgcHzDQKycf26QKLZLcCZ7w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/5a7d2f-5168-4720-8ce0-704149619c46/1/RYzFKgcHzDQKycf26QKLZLcCZ7w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/5a7d2f-5168-4720-8ce0-704149619c46/1/RYzFKgcHzDQKycf26QKLZLcCZ7w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:13:8a:a1:ac:96:f6:28:b2:3d:51:21:07:23:0a:58:f8:35:
9e:63:95:42:a7:be:f9:18:68:ec:f5:9a:a0:94:92:f6:76:46:
0e:9f:9b:6a:b2:50:d3:3b:4e:5a:22:77:7c:06:26:ac:68:3a:
78:19:fc:df:e6:32:6b:7e:68:cb:3f:4e:49:d1:89:b8:5a:09:
c1:18:34:00:c4:13:73:34:94:28:03:88:99:ac:e2:45:ad:77:
9c:0c:c2:27:be:70:a2:ee:6b:75:a2:5e:ba:f7:44:6c:e2:ba:
9d:d9:25:3a:67:f2:35:a3:3c:b8:aa:30:40:6b:7b:1f:55:e6:
80:d5:a2:cd:01:1d:2b:9c:05:d6:fb:50:9c:16:f0:3a:9d:c1:
3d:a5:e8:46:bf:bc:d1:98:10:57:c3:dd:39:1d:20:78:a0:93:
a4:82:b8:a0:0d:72:76:3c:f9:bd:2d:89:cf:ce:00:42:40:4b:
59:e9:09:1c:33:38:46:d8:52:e4:e2:83:d9:e3:29:db:42:55:
f1:72:2a:bc:22:c2:62:e9:d1:93:75:20:40:e0:f5:b2:62:f7:
0b:7f:11:45:4e:96:a4:a3:2a:00:41:6c:8c:f6:cb:62:c6:f7:
88:bc:a0:8d:02:a9:f6:27:50:28:6b:21:9d:26:60:34:32:f0:
bf:73:97:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:41:54 2025 by rpki-client